Share

Microsoft warns of possible attacks after Xbox certificate leaked

The company has released dozens of security bulletins and the company is issuing too many security patches to protect its users. The massive database and confidential details of Xbox Live users make the website a good target for hackers. The source of the disclosure was not explained by Microsoft, but the company did note no attacks from the leak have been detected.

Advertisement

However, it added that these keys “cannot be used to issue other certificates, impersonate other domains, or sign code”.

The certificate, which was used for Microsoft’s xboxlive.com domain, has been revoked on Microsoft’s Certificate Trust list, but it could potentially be used to attack systems that haven’t been updated in man-in-the-middle attacks that “spoof” the Xbox Live network.

Microsoft said it wasn’t aware of any attacks relating to the accidental leak, however. While many PC gamers already have a working controller to begin with, the Windows 10 restriction caused many to pass on the new dongle.

Sure enough, on Tuesday this week Microsoft issued its December 2015 bundle of patches – fixing everything from Internet Explorer to Microsoft Edge (the new name for Internet Explorer) to Microsoft Office and Windows itself. “Microsoft is not now aware of attacks related to this issue”. Once binded to a wireless Xbox One controller, users can enjoy the same gaming experience on their PC as they do their console, including in-game chat. According to his tweet, “In addition to Windows 10, starting today Xbox Wireless Adapter now supports Windows 7 & 8.1”.

Advertisement

“That said, it’s an issue for every organisation, not just Microsoft”, he said.

Microsoft Takes Countermeasures After Xbox Live SSL Certificate Blunder